Application No.: 09/911,042 



Docket No.: SONYJP 3.0-190 



IN THE CLAIMS 

1. (currently amended) A data processing apparatus for 
executing reproduc ingfe LoR e-£ — data from a memory device or for 
recording e-£ — data into a memory device , the recording or 
reproducing ordinarily being carried out on condition that e 
mutual authentication between said data processing apparatus and 
aaid — the memory device is — establishe d successful, said data 
processing apparatus comprising : 

a virtual memory device; 

a structure operable to execute^ftf said — the mutual 
authentication with said virtual memory device when said 
the memory device cannot — function — to — does not include a 

structure operable to execute said the m utual 

authentication ; and 

a structure operable to executing — said — reproduce t i on 
o# — data from said the m emory device or said recording e# 
data into said the m emory device on condition that when the 

mutual authentication between said data processing 

apparatus and with said virtual memory device is successful 
established . 

2. (currently amended) The data processing apparatus 
according to Claim lj_ further comprising a structure operable to 
first execute^ the mutual authentication with said the memo r y 
device when said mutual authentication is available by initially 
checking whether said the m emory device i-s — capable — e£ — includes 

the structure operable to executive said the mutual 

authentication or not . 

3. (currently amended) The data processing apparatus 
according to Claim 1, further comprising: 

a key for authenticating distribution of an enabling 
key block, said key having been previously enciphered by 
such — the enabling key block^ the enabling key block 
containing enciphering data for enciphering renewal keys 
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which are located on various paths constituting — of a 

hierarchical key tree structure^ comprising the 

hierarchical tree structure having a variety — plurality of 

keys disposed in correspondence associated w ith tree 

various roots of the tree structure , nodes of the tree 
structure , and leaves of the tree structure, e n — whereby a 
given one of the plurality of paths of the key structure 
extends ranging — from a specific one of the roots to a 
paricular one of the leaves of said key tree structure, the 
leaves of the tree structure being respectively associated 

with corresponding fee a plurality of data processing 

apparatuses as ewn leaves , said — the enciphering data 

further — comprising including upper- rank keys in said tree 
hierarchy which are -fee — fee — enciphered by lower-rank keys; 
and 

said the mutual authentication executed between said 
structure of said data processing apparatus and said 
virtual memory device being -i-s — executed by applying said 
enabling key block distribution authenticating key and 
another authenticating key previously stored in said 
virtual memory device. 

4. (currently amended) The data processing apparatus 
according to Claim 3, wherein 

only a properly licensed said data processing 

apparatus is able enabled to decode said enabling key block 
only when properly licensed- whereas — a — data — processing 
apparatus — devoid — e-f — a — proper — license — and is unable to 
decode said the enabling key block when devoid of a proper 

licensed a plurality e-f data processing apparatuses 

jointly constituting leaves of said key tree structure ; and 

said data — processing — apparatus — preventing — such — data 
processing apparatus devoid of a — the proper license being 
prevented from illegally implementing mutual authentication 
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with said virtual memory device by revoking said improper 
data processing apparatus. 

5. (currently amended) The data processing apparatus 
according to Claim 3, further comprising means for subjecting 
said enabling key block distribution authenticating key 
enciphered and presented by said enabling key block to a version 
controlling process by way — e£ — executing a process for renewing 
individual versions . 

6. (currently amended) The data processing apparatus 
according to Claim 1, further comprising: 

a key tree structure comprising a variety plurality of 
keys disposed — in — corrcopondencQ — associated w ith various 
roots of the tree structure , nodes of the tree structure , 
and leaves of the tree structure, e n — and having a plurality 
of paths whereby a given one of the paths extends ranging 
from a specific one of the roots to a particular one of the 
leaves of said the key tree structure, a plurality of data 
processing apparatuses being respectively associated with 
the leaves of the tree as own leaves , 

means for enciphering leaf-keys provided i» 

correspondence associated w i t h own the leave s with using a 
storage key that is proper to an individual onee of said 
data processing apparatuses and then storing the enciphered 

leaf -key in a memo r y me an s inside e-£ the within a 

corresponding data processing apparatus. 

7. (currently amended) The data processing apparatus 
according to Claim 1, further comprising: 

a key tree structure comprising a variety plurality of 

keys disposed ana correspondence — respectively associated 

with various roots of the tree structure , nodes of the tree 
structure , and leaves of the tree structure, e fl -and having 
a plurality of paths that extend ranging from the roots to 
the leaves of said key tree structure, there — being — a 
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plurality of data processing apparatuses respectively 
corresponding to own — the leaves of the tree -; — based — ef* and 
to leaf-keys provided — ±& — that further correspondeaee with 
own the leaves , 

a device key block stored in a memory within the 

processing apparatus, the key block being an assemblage of 
ciphered keys comprising mutually different individually 
enciphered node keys of plural steps ranging extending from 
own the leaves of the tree structure up to upper -rank keys 
of oaid the key tree structure. 

8. (currently amended) A data processing method for 
executing reproduc ing tion e£ — data from a memory device or 
recording ef — data into oaid — the m emory device, said data 
processing method comprising the atcpo of : 

executing a mutual authentication process with a 

virtual memory device provided in oaid — a data processing 
apparatus when oaid the m emory device does not include a 
devoid of — a — function — fee — execute — said mutual authentication 
function ; and 

executing — reproducingfeief* e£ — the data from said — the 
memory device or recording e# —the data into said the m emory 

device on conditioned on s aid that the mutual 

authentication being actually — effectuated between said the 
data processing apparatus and said — the v irtual memory 
device is successful . 

9. (currently amended) The data processing method 
according to Claim 8, further comprising the steps of : 

identifying , prior to said executing step, whether 
oaid the m emory device is capable of executing said mutual 
authentication; and 

alternatively executing a mutual authentication 
between said — the data processing apparatus and said — the 
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memory device when execution of said mutual authentication 
between them is possible. 

10. (currently amended) The data processing method 
according to Claim 8, wherein 

□aid the data processing apparatus comprises — includes 
an enabling key block distribution authenticating key 
previously enciphered by an enabling key block^ the 

enabling key block including containing data for 

enciphering renewal keys that are located on a path which 
-irs — part — of a key tree structure having with — a variety 
plurality of keys respectively disposed — i** — correspondence 
associated w ith various roots of the tree structure , nodes 
of the tree structure , and leaves of the tree structure, e ft 
the paths ranging extending from the roots to the leaves of 
said key tree structure, a plurality of data processing 
apparatuses respectively associated with corresponding — fee 
ewfi — the leaves, said — the enciphering key also including 
data for enciphering upper-rank keys via lower-rank keys; 

said mutual authentication process executed — between 
said — the data processing apparatus and said — the virtual 
memory device being executed by applying said the enabling 
key block distribution authenticating key and the other 
authenticating key previously stored in said — the virtual 
memory device . 

11. (currently amended) A license system for providing a 
data processing apparatus system w ith a proper license control, 
comprising : 

means for providing an enabling key block distribution 
authenticating key , the enabling key block distribution 
authenticating key being previously enciphered by an 
enabling key block containing data for enciphering renewal 
keys located on paths constituting of a key tree structure^ 
comprising the key structure having a variety plurality of 
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keys disposed — hi — corroopondoncG — associated w ith various 
root s of the key tree structure , nodes of the key tree 
structure , and leaves of the tree structure, on a w hereby a 
given one of the plurality of paths ranging extends from a 
specific one of the roots to a particular one of the leaves 
of said — the key tree structure, a plurality of data 

processing apparatuses corresponding fee ewn being 

associated with the leaves, said — the enabling key block 
also comprising data for enciphering upper-rank keys via 
lower-rank keys ; 

a virtual memory device; 

means for executing — a — procooG — #02? — reproducing data 
from a memory device or recording data into said the m emory 

device on conditioned en whether a that m utual 

authentication is actually successfully effectuated between 
said data processing apparatus and said the m emory device^_ 
even or w hen said the memory device is devoid of a function 
does not include means for carrying out the mutual 
authentication , by making use of said virtual memory device 

when said memory device irS incapable e£ mutual 

authentication, fee execute on condition that m u t ua 1 

authentication is successfully effectuated between w-j-feh 
said data processing apparatus and said virtual memory 
device ; and 

means for enabling only a properly licensed data 
processing apparatus to properly — decode said — the enabling 
key block that provide s-ing said — the enabling key block 
distribution authenticating key among a — the p lurality of 
data processing apparatuses^ for constituting said key tree 
structure and means for preventing such aft data processing 
apparatus devoid of a — the proper license from illegally 
decoding said the enabling key block, thereby preventing 
said — improper the data processing apparatus devoid of the 
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proper license from illegally effectuating authentication 
with said virtual memory device — further — prevent — said 

improper data processing apparatus from — and illegally 

utilizing contents data. 

12. (currently amended) A program providing 

computer-readable medium which provided^ — a — computer — system with 

a specif ic computer program for executing a method of 

reproducing^ie** — data from a memory device or recording e# 
data into a — the m emory device-^ said computer — program — method 
comprising : 

a — module — executing a — mutual authentication between a 
data processing apparatus and a virtual memory device 
provided in a corresponding data processing apparatus when 

the memory device does no t inc lude a 4rS devoid — ef — a 

function to execute m utual authentication function ; and 

a — module — executing — reproducing^ieft — data from said 
the memory device or recording e-i—data into said the memory 
device conditioned — upon said — the m utual authentication 
being actually — successfully effectuated between said — the 
data processing apparatus and said virtual memory device. 

13. (currently amended) A data processing apparatus 
for recording data to— or reproducing data frortb- a memory 
device, the apparatus comprising: 

a controller; and 
a virtual memory; 

wherein the recording of ^fefee data to— or 

reproducingtiee of ^fee — data fronb- the memory device is 
conditioned upon ^fehe — successful establishment — e£ — a — mutual 
authentication between the controller and the virtual 
memory when the memory device does not support such mutual 
authentication . 

14. (currently amended) The data processing apparatus of 
claim 13, wherein prior to performing the mutual authentication 
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between the controller and the virtual memory, the controller 
chccko — ir£ — determines whether the memory device includes the 

supports mutual authentication function , and— if so, the 

recording of -fehe — data to— or reproduc ing tion of ^he — data fronvr 
the memory device is conditioned upon ^tfee — establishment — ef — ttee 
successful m utual authentication between the controller and the 
memory device. 

15. (currently amended) The data processing apparatus of 
claim 13^ wherein the mutual authentication is performed between 
the controller and the virtual memory is carried out by applying 
an authenticating key stored in the virtual memory and an 
enabling key block distribution authenticating key, wherein the 
enabling key block distribution authenticating key is previously 
enciphered by an enabling key block comprising enciphering data 
for enciphering renewal keys^ ef* — the renewal keys being located 
along paths of a hierarchical key tree structure comprising in 
which a variety — plurality of keys are associated disposed — ana 
correspondence w ith various roots of the key structure , nodes of 
the key structure , and leaves of the key tree structure^ whereby 
a given one of the plurality of e n— paths ranging extends from a 
specific one of the roots to a particular one of the leaves of 

the key tree structure, a**d wherein the data processing 

apparatus i-s — being associated with one of the leaves of the key 

tree structure, and wherein said enciphering data further 

comprises including upper-rank keys to be enciphered by lower- 
rank keys . 

16. (currently amended) The data processing apparatus 
according to claim 15, wherein the data processing apparatus is 
properly licensed if the data processing apparatus is enabled to 
decode the enabling key block^ and wherein the data processing 
apparatus is devoid of proper licensing if the data processing 
apparatus is unable to decode the enabling key block. 
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17. (currently amended) The data processing apparatus 
according to claim 15^ wherein the enciphered enabling key block 
distribution authenticating key enciphered — fey — fefee — enabling — key 

block is subject to a version control ling process or to 

executing — a process for renewing individual versions — efi — th e 
controller . 

18. (currently amended) The data processing apparatus 
according to claim 13^ further comprising a memory for storing 
an enciphered leaf key, the enciphered leaf key being produced 
by enciphering a leaf key with a storage key that is associated 
with the data processing apparatus, the leaf key being a— part of 
a hierarchical key tree structure having comprioing — a variety 

plurality of keys disposed i** correspondence respectively 

associated w ith various roots of the tree structure , nodes of 
the tree structure , and leaves of the key tree structure^ 
whereby a given one of the plurality of on paths extends ranging 
from a specific one of the roots to a particular one of the 
leaves of the key tree structure, and wherein the leaf key is 
associated with the data processing apparatus. 

19. (currently amended) The data processing apparatus 
according to claim 13_^ further comprising a memory for storing a 
device key block comprising a& assemblage plurality of ciphered 

keys further comprioing that include m utually different 

individually enciphered node keys of a hierarchical key tree 
structure having comprising a variety plurality of keys disposed 
if* — correspondence respectively associated with various roots of 
the key structure , nodes of the key structure , and leaves of the 
key tree structure , and having a plurality of e^t— paths whereby a 
given one of the paths ranging extends from a given one of the 
roots to a particular one of the leaves of the key tree 
structure, and wherein one of the leaves is associated with the 
data processing apparatus. 
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20. (currently amended) A method — £e*? — ur&e — i-In a device for 
recording data to- or reproducing data from-r a memory device, 
the a method comprising the steps of : 

(a) executing a — mutual authentication process with a 
virtual memory device when the memory device does not 

include a support fefee mutual authentication function 

process ; and 

(b) if the mutual authentication between the device 
and the virtual memory device is successful, executing the 
recording of the data to— or the reproduc ing tion of the 
data froirvr- the memory device. 

21. (currently amended) The method of claim 20^ further 
comprising the — stops — e#: 

-fe-) — prior to step (a) , identifying whether the memory 

device supports includes the mutual authentication 

f unct ionproccss ; and 

-fdr) — if the memory device supports includes the mutual 

authentication f unct ionproccss , skipping stop (-a-) a**3 

executing the mutual authentication process — function w ith 
. the memory device in place of step (a)# eg — fefee — purpose — e# 

recording — data — fce^ ene — reproducing — data — from, fefee — memory 

device . 

22. (currently amended) The method of claim 20_;_ wherein 
the mutual authentication process is executed between the device 
and the virtual memory is carried out by applying an 
authenticating key stored in the virtual memory a**d — together 
with an enabling key block distribution authenticating key, 
wherein the enabling key block distribution authenticating key 

i-s being previously enciphered by an enabling key block 

comprising that includes enciphering data for enciphering 

renewal keys located along e n— paths of a hierarchical key tree 

structure having comprising a variety plurality of keys disposed 

is — correspondence respectively associated w ith various roots of 
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the tree structure , nodes of the tree structure , and leaves of 
the key tree structure^ whereby a given one of the plurality of 
on paths extends ranging from a specific one of the roots to a 
particular one of the leaves of the key tree structure, e*td 
wherein the device 4r& — being associated with one of the leaves of 
the key tree structure, and wherein — said — the enciphering data 

including further comprises — upper- rank keys that are to be 

enciphered by lower-rank keys. 

23. (currently amended) A license syste m for use in a data 
processing system, the license system comprising: 

means for providing an enabling key block distribution 
authenticating key having been previously enciphered by an 
enabling key block , the enabling key block including 
comprising — enciphering data for enciphering renewal keys 
that are located along e **— paths of a hierarchical key tree 
structure comprising — having a variety — plurality of keys 

disposed ifi correspondence — respectively associated wi th 

roots of the key structure , nodes of the key structure , and 
leaves of the key tree structure^ eft - whereby a given one of 
the plurality of paths extends ranging from a specific one 
of the roots to a particular one of the leaves of the key 
tree structure, and wherein at least one of the leaves of 
the key tree structure is — being associated with a — device 
data processing apparatus , and said enciphering data 
further including comprising upper-rank keys that are to be 
enciphered by lower-rank keys; 
a virtual memory device; 

means for executing — a — process — #ea? — reproducing data 
from-7- or recording data to- a memory device on conditioned 

that en whether a mutual authentication 4h3 actually 

effectuated — between the device — data processing apparatus 
and the virtual memory device is successful when the memory 
device does not include means for ds-s — devoid of — a — function 
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-fee — execute ing the mutual authentication with the — device 
data processing apparatus ; and 

the data processing apparatus device — being properly 
licensed if ^fee — device — arS — enabled to decode the enabling 
key block and -fefee — device — being devoid of proper licensing 
if unable to decode the enabling key block. 

24. (currently amended) A computer-readable medium for 
storing computer-executable software code for carrying out a 
method of recording of data to- or the reproduc ing^ -eg* e#~- data 
from-r a memory device, said code method comprising: 

code — — executing a mutual authentication process 

with a virtual memory device when the memory device does 

not include a support — fcfee — mutual authentication function 

process ; and 

code — #e2r — executing — fc-he — recording e£ — the data to- or 
^he-reproduc ing t i on of the data frorrb- the memory device i# 
tfee — if the mutual authentication between — fefee — device — astd 
with the virtual memory device is successful. 
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